
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier: yGxXigSmxBY/BlzEQdRt8qY9RgUX5gIIGuD298Mt39c=
Subject key identifier: 0E:A9:C8:11:F5:85:92:0C:9F:C1:9B:79:69:1D:73:F6:36:3B:66:79
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number: 029A
Signing time: Fri 27 Mar 2026 01:26:56 +0000
Manifest this update: Fri 27 Mar 2026 01:26:55 +0000
Manifest next update: Fri 03 Apr 2026 01:26:55 +0000
Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: CxgTgt9pBYuOfQfFnXYUJdSRHSOAyx1hyyoc5JfYHlA=)
2: 5F5A375CFF0C11F0AEE33AB880EE528E.roa (hash: uNnYabDdr+X3Z2RvWPceJhaH0aT0V7q+W0VcLO4pYtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Validity
Not Before: Mar 27 01:26:55 2026 GMT
Not After : Apr 3 01:26:55 2026 GMT
Subject: CN=69c5dce0-34d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:86:2e:fd:5a:5a:21:fc:9b:d5:4d:f9:9a:
dc:15:e2:7f:e7:d3:f7:5a:b7:83:b6:19:f7:5b:67:
c5:39:a5:8c:8d:d7:68:b1:0e:d5:51:98:47:06:a7:
1e:b3:4b:12:61:7a:31:ea:2b:d1:dc:7b:6d:21:ee:
30:d4:6f:d8:b0:81:5f:b1:87:8f:3d:2f:2d:2c:25:
00:ac:e2:ac:79:58:0c:8b:1e:e4:2b:9a:10:38:ed:
b4:d5:75:59:6f:df:fd:7a:fc:3e:04:12:0f:bd:d8:
0b:dc:ca:8f:e1:06:cc:b6:cf:7f:cd:fe:9b:63:52:
2a:86:89:09:b0:e9:f7:c1:70:c1:19:6f:80:9a:5d:
06:e2:09:85:d7:97:af:f3:77:a8:a2:77:f4:00:ac:
32:33:f4:d6:1f:2f:38:9c:09:54:01:22:e8:44:6f:
3c:ba:c2:02:24:17:bd:5c:67:ff:b4:3a:6f:17:dd:
65:50:24:b6:68:87:c8:09:10:8e:0b:fa:4b:5c:24:
d2:52:b4:06:78:2c:c5:bb:49:27:a3:7b:4e:c0:15:
a3:47:c9:10:72:bf:91:18:f5:db:a3:de:01:10:d8:
f1:87:7c:27:5a:3c:49:00:21:ee:db:e2:8d:ea:be:
39:32:67:70:61:ed:09:61:ba:83:0c:95:6a:36:f6:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:C8:11:F5:85:92:0C:9F:C1:9B:79:69:1D:73:F6:36:3B:66:79
X509v3 Authority Key Identifier:
keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ae:50:32:70:16:b4:6f:65:74:20:8e:27:90:ba:6a:53:9e:
fb:cd:fe:5c:69:60:ca:27:bb:b3:4f:6d:11:0a:dc:96:d6:d3:
99:a3:46:11:5c:eb:b2:43:e2:ab:0d:36:bf:c3:aa:4e:28:00:
f2:00:56:e9:75:10:07:ca:06:4d:39:27:74:5f:9b:b3:d6:49:
10:d7:33:f9:0f:0d:a8:d6:86:2a:08:42:c1:14:2b:dc:8b:23:
fb:cd:16:35:04:51:b6:60:36:9d:07:8b:a0:d4:90:71:a1:b6:
79:d6:be:16:1d:eb:3a:53:16:40:dd:c5:57:3e:fc:e0:65:db:
16:11:23:af:1f:0a:da:a1:58:f6:46:a1:d1:8c:17:76:6d:33:
56:92:28:74:02:c0:f8:8b:8e:21:8e:b9:41:29:68:09:44:83:
86:47:1d:c8:08:78:25:8b:a1:0d:d5:32:e5:7d:b4:a7:3a:9d:
16:27:ef:95:96:46:69:bb:4c:70:93:2a:be:94:f6:a7:33:bc:
d3:b2:75:f4:49:93:c4:13:86:a9:d2:3a:f6:21:f7:59:d8:61:
05:e7:75:b7:9d:fa:ff:b6:de:18:e6:59:ee:0d:79:75:d4:a5:
c9:11:67:f1:07:c9:72:d3:12:54:c3:0b:15:a0:43:33:f3:23:
5d:a8:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:56 2026 by rpki-client